Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-30	CVE-2023-43792	Code Injection vulnerability in Basercms baserCMS is a website development framework. network low complexity basercms CWE-94 critical	9.8
2023-10-30	CVE-2023-43649	Cross-Site Request Forgery (CSRF) vulnerability in Basercms baserCMS is a website development framework. network low complexity basercms CWE-352 critical	9.8
2021-11-26	CVE-2021-41243	OS Command Injection vulnerability in Basercms There is a Potential Zip Slip Vulnerability and OS Command Injection Vulnerability on the management system of baserCMS. network low complexity basercms CWE-78 critical	9.0
2021-11-26	CVE-2021-41279	Path Traversal vulnerability in Basercms BaserCMS is an open source content management system with a focus on Japanese language support. network low complexity basercms CWE-22 critical	9.0
2021-03-26	CVE-2021-20682	OS Command Injection vulnerability in Basercms baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors. network low complexity basercms CWE-78 critical	9.0